Flexvpn fvrf 3G or adsl

Is it possible for an 819 router to have a 3G connection to a headend device using two vti ipsec interfaces in separate VRFs and the 3G connection within a fvrf?
I understand this is possible though I am not sure if it will work with a 3G interface...?
Thanks in advance for any response..

Hi
No we had no response so have gone to neorouter and it works fine, interestingly it is only recent installations that are effected by this. Such a shame as it was a great solution when it worked.

Similar Messages

Flexvpn (ikev2) , dmvpn (mGRE), tunnel ivrf and fvrf

Hello!
I see strange spoke behaviour in case of the same ivrf and fvrf on spoke interface:
someting like this
interface Tunnel2
ip vrf forwarding test
ip address 172.20.1.5 255.255.255.0
no ip redirects
ip mtu 1416
ip nhrp map 172.20.1.1 192.168.42.150
ip nhrp map multicast 192.168.42.150
ip nhrp network-id 10
ip nhrp nhs 172.20.1.1
ip nhrp registration no-unique
tunnel source GigabitEthernet1.777
tunnel mode gre multipoint
tunnel vrf test
tunnel protection ipsec profile default
in this case I always can ping hub from this interface , but not always another spoke-
if it starts working it works until some timeout, sometimes it doesn't work from CSR1000v reload.
I always see another spoke in nhrp table, but sometimes there is even no tries to open ikev2 connection, sometimes there is ikev2 , but 0 packets for decription on this spoke side.
Sometimes clear ip nhrp helps, but not always.
I can't reproduce this, it happens often, but I don't know how to reproduce.
There is no such problem if only fvrf or ivrf is set.
Not sure , but looks like setting different fvrf and ivrf works OK too.
Any ideas what is wrong here?
Thank you!

Thanks for the reply Olivier!
I've tried with both user | group and the result is the same:
.Dec 21 09:12:42.295 UTC: IKEv2:Adding Proposal default to toolkit policy
.Dec 21 09:12:42.295 UTC: IKEv2:(SA ID = 1):Using IKEv2 profile 'IKEV2-PROFILE-CPE'
.Dec 21 09:12:42.295 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_VERIFY_POLICY_BY_PEERID
.Dec 21 09:12:42.295 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_CHK_AUTH_TYPE
.Dec 21 09:12:42.295 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_GET_PRESHR_KEY
.Dec 21 09:12:42.295 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_VERIFY_AUTH
.Dec 21 09:12:42.299 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_CHK_EAP
.Dec 21 09:12:42.299 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_NOTIFY_AUTH_DONE
.Dec 21 09:12:42.299 UTC: IKEv2:(SA ID = 1):SM Trace-> SA: I_SPI=AE319370B15625DB R_SPI=59F98CFBB392558D (I) MsgID = 00000001 CurState: I_PROC_AUTH Event: EV_NO_EVENT
.Dec 21 09:12:42.299 UTC: IKEv2:IKEv2 local AAA author request for '87.84.214.31'
.Dec 21 09:12:42.299 UTC: IKEv2:IKEv2 local AAA - policy '87.84.214.31' does not exist.
.Dec 21 09:12:42.299 UTC: IKEv2:IKEv2 authorization error 162
I don't think local authorization can work with PSK, since it is said here that "Local AAA is not supported for AAA-based preshared keys."

2 x 2911 HSEC router 3 ADSL connections each Site ti Site VPN Load Balancing Failover

Hello,
My senario is as described in Title.
Site A Headquarters. The router is Cisco 2911HSEC with 3 ADSL connections
Site B Remote Office. The router is Cisco 2911HSEC with 3 ADSL connections and 10 Users.
All ADSL connections have static IPs and belong to same ISP.
Need - Site to Site VPN between the routers.
Client requests to load balance the traffic, due to poor ADSL speed and have a failover senarion in case an ADSL line goes down.
Any help will be appreciated.

I don't believe you will find a One solution for this.
An idea would be to have all three ADSLs paired with ADSL on the other side.
Have 3 VTI (or GRE) tunnels up all the time (VRF-lite anybody?) and advertise routes to the other side with same metric.
This will cause IOS to load balance natively.
Potential problem: return path might not be the same as forward path, but it should not matter much for most applications.
Potential cool thing you can do: All the "magical" things in routing world (Did I head PfR?). FlexVPN on top to make it more flexible.
Benefit: Rely on IKE to bring down connections which are going down. Little-to-no management once it's up and running.

FlexVPN Cannot Ping From Spoke LAN only

Topology:
Hub:
(hub lan: 10.0.1.0/24) > (lan int [ip nat inside], g0/0: 10.0.1.1) > (flex interface, loopback100: 172.31.100.1) > (flex virtual interface, Virtual-Template1: ip unnumbered loopback100) > (wan int [ip nat outside], dialer0 - g0/1) > ISP
Spoke:
(hub lan: 10.0.3.0/24) > (lan int [ip nat inside], vlan1: 10.0.3.1) > (flex interface, Tunnel0 ip address negotiated, tunnel source vlan 1) > (wan int, dialer0 [ip nat inside] - f0/4) > ISP
I have full reachability from both routers.
Hub router can ping 172.31.100.x, 10.0.3.1 and hosts on 10.0.3.0/24 via standard ping, or extended and sourced from 10.0.1.1 or g0/0
Spoke router can ping 172.31.100.1, 10.0.1.1 and hosts on 10.0.1.0/24 via standard ping, or extended and sourced from 10.0.3.1 or vlan1
Partial reachability from lan hosts
Hub hosts can ping 172.31.100.x and 10.0.3.1, but not hosts on 10.0.3.0/24 (Possibly because host cannot reply to echo request?)
Spoke hosts cannot ping 172.31.100.1, 10.0.1.1 or hosts on 10.0.1.0/24
Any help would be appreciated

We've been working with these confs for a while, so they aren't as clean as they could be, but here they are
---HUB---
version 15.2
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname HUB
boot-start-marker
boot system flash:c1900-universalk9-mz.SPA.152-4.M5.bin
boot-end-marker
security authentication failure rate 3 log
security passwords min-length 6
enable secret xxxxx
aaa new-model
aaa group server radius FLEXVPN_AUTH-C_SERVER_GROUP
server-private 10.0.1.15 key xxxxx
aaa authentication login default local
aaa authentication login xxxxxVPN_VPN_XAUTH local
aaa authentication login FLEXVPN_AUTH-C_LIST group FLEXVPN_AUTH-C_SERVER_GROUP
aaa authorization exec default local
aaa authorization network default local
aaa authorization network xxxxxVPN_VPN_GROUP local
aaa authorization network FLEXVPN_AUTH-Z_LIST local
aaa session-id common
clock timezone CST -6 0
clock summer-time CDT recurring
clock calendar-valid
no ip source-route
no ip gratuitous-arps
ip cef
no ip bootp server
ip domain name xxxxx.net
ip name-server 166.102.165.13
ip name-server 166.102.165.11
ip name-server 8.8.8.8
ip name-server 8.8.4.4
ip name-server 4.2.2.1
no ipv6 cef
multilink bundle-name authenticated
vpdn enable
vpdn-group VPN_GROUP
key chain EIGRP_KEY_CHAIN
key 1
key-string xxxxx
crypto pki trustpoint FLEXVPN_RA_TP
enrollment terminal
serial-number none
fqdn vpn.xxxxx.net
ip-address none
subject-name cn=vpn.xxxxx.net
revocation-check crl
eckeypair FLEXVPN_RA_TP-Key
crypto pki certificate chain FLEXVPN_RA_TP
certificate 460000.. nvram:xxxxx#2.cer
certificate ca 59A43A15.. nvram:xxxxx#BC60CA.cer
license udi pid CISCO1921/K9 sn xxxxx
archive
path ftp://xxxxx
write-memory
username xxxxx privilege 15 password xxxxx
redundancy
crypto ikev2 authorization policy default
pool FLEX_SPOKES_POOL
route set interface
crypto ikev2 authorization policy FLEXVPN_RA_LOCAL_POLICY
pool FLEXVPN_RA_POOL
dns 10.0.1.15
netmask 255.255.255.0
def-domain xxxxx.net
route set access-list FLEXVPN_RA_ACL
crypto ikev2 proposal SHA1-only
encryption aes-cbc-256
integrity sha1
group 5
crypto ikev2 policy SHA1-only
match fvrf any
proposal SHA1-only
crypto ikev2 keyring FLEX_KEY
peer ALL
address 0.0.0.0 0.0.0.0
pre-shared-key local xxxxx
pre-shared-key remote xxxxx
crypto ikev2 profile FLEX_IKEv2
match identity remote address 0.0.0.0
authentication remote pre-share
authentication local pre-share
keyring local FLEX_KEY
aaa authorization group psk list default default
virtual-template 1
crypto ikev2 profile FLEXVPN_RA_IKEv2_PROFILE
match identity remote key-id xxxxx.net
identity local dn
authentication remote eap query-identity
authentication local rsa-sig
pki trustpoint FLEXVPN_RA_TP
dpd 60 2 on-demand
aaa authentication eap FLEXVPN_AUTH-C_LIST
aaa authorization group eap list FLEXVPN_AUTH-Z_LIST FLEXVPN_RA_LOCAL_POLICY
virtual-template 10
crypto ikev2 dpd 30 5 on-demand
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
crypto logging session
crypto isakmp client configuration group xxxxxVPN
key xxxxx
pool xxxxxVPN_POOL
acl xxxxxVPN_ACL
netmask 255.255.255.0
crypto isakmp profile xxxxxVPN_IKE_PROFILE
   match identity group xxxxxVPN
   client authentication list xxxxxVPN_VPN_XAUTH
   isakmp authorization list xxxxxVPN_VPN_GROUP
   client configuration address respond
   virtual-template 100
crypto ipsec transform-set xxxxxVPN_SET esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set IKEv2 esp-gcm
mode transport
crypto ipsec profile xxxxxVPN_IPSEC_PROFILE
set transform-set xxxxxVPN_SET
set isakmp-profile xxxxxVPN_IKE_PROFILE
crypto ipsec profile FLEXVPN_RA_IPSEC_PROFILE
set ikev2-profile FLEXVPN_RA_IKEv2_PROFILE
crypto ipsec profile default
set transform-set IKEv2
set ikev2-profile FLEX_IKEv2
interface Loopback100
ip address 172.31.100.1 255.255.255.255
interface Embedded-Service-Engine0/0
no ip address
shutdown
interface GigabitEthernet0/0
ip address 10.0.1.1 255.255.255.0
no ip unreachables
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
pppoe enable group global
pppoe-client dial-pool-number 1
interface Virtual-Template1 type tunnel
description FlexVPN hub-to-spokes
ip unnumbered Loopback100
ip mtu 1400
ip nhrp network-id 1
ip nhrp redirect
ip tcp adjust-mss 1360
tunnel path-mtu-discovery
tunnel protection ipsec profile default
interface Virtual-Template10 type tunnel
ip unnumbered GigabitEthernet0/0
tunnel mode ipsec ipv4
tunnel protection ipsec profile FLEXVPN_RA_IPSEC_PROFILE
interface Dialer0
mtu 1492
ip address negotiated
no ip unreachables
ip nat outside
ip virtual-reassembly in
encapsulation ppp
ip tcp adjust-mss 1450
dialer pool 1
dialer idle-timeout 0
dialer persistent
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname [email protected]
ppp chap password xxxxx
ppp pap sent-username [email protected] password xxxxx
no cdp enable
router eigrp 1
distribute-list EIGRP_SUMMARY_PFLIST out Virtual-Template1
network 10.0.1.0 0.0.0.255
network 172.30.200.0 0.0.0.255
network 172.31.100.1 0.0.0.0
passive-interface GigabitEthernet0/0
ip local pool xxxxxVPN_POOL 172.30.255.1 172.30.255.254
ip local pool FLEX_SPOKES_POOL 172.31.100.10 172.31.100.254
ip local pool FLEXVPN_RA_POOL 172.30.200.1 172.30.200.254
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list 1 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 172.30.200.0 255.255.255.0 Null0
ip access-list standard FLEXVPN_RA_ACL
permit 10.0.1.0 0.0.0.255
permit 10.0.2.0 0.0.0.255
permit 10.0.3.0 0.0.0.255
permit 10.0.4.0 0.0.0.255
ip access-list standard MGMT_ACL
permit 172.30.200.0 0.0.0.255
permit 172.31.254.0 0.0.0.255
permit 10.0.1.0 0.0.0.255
ip access-list extended xxxxxVPN_ACL
permit ip 172.30.255.0 0.0.0.255 any
permit ip 10.0.1.0 0.0.0.255 any
permit ip 172.31.254.0 0.0.0.255 any
ip prefix-list EIGRP_SUMMARY_PFLIST seq 10 permit 10.0.1.0/24
ip prefix-list EIGRP_SUMMARY_PFLIST seq 20 permit 172.30.200.0/24
ip prefix-list EIGRP_SUMMARY_PFLIST seq 30 permit 172.31.100.1/32
access-list 1 permit 10.0.1.0 0.0.0.255
route-map EIGRP_SUMMARY_RMAP permit 10
match ip address prefix-list EIGRP_SUMMARY_PFLIST
control-plane
banner motd Cxxxxx
line con 0
line aux 0
line 2
no activation-character
no exec
transport preferred none
transport output pad telnet rlogin lapb-ta mop udptn v120 ssh
stopbits 1
line vty 0 4
access-class MGMT_ACL in
privilege level 15
transport input telnet ssh
line vty 5 15
transport input all
scheduler allocate 20000 1000
ntp update-calendar
ntp server 1.pool.ntp.org
ntp server 0.pool.ntp.org prefer
end
---SPOKE---
version 15.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname SPOKE
boot-start-marker
boot system flash:c880data-universalk9-mz.152-4.M5.bin
boot-end-marker
security authentication failure rate 3 log
security passwords min-length 6
enable secret xxxxx
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa authorization network default local
aaa session-id common
memory-size iomem 10
clock timezone CST -6 0
clock summer-time CDT recurring
clock calendar-valid
no ip source-route
no ip gratuitous-arps
no ip bootp server
ip domain name xxxxx.net
ip name-server 8.8.8.8
ip name-server 8.8.4.4
ip name-server 4.2.2.1
ip cef
no ipv6 cef
multilink bundle-name authenticated
key chain EIGRP_KEY_CHAIN
key 1
key-string xxxxx
license udi pid CISCO881-SEC-K9 sn FTX1740854N
archive
path ftp://xxxxx
write-memory
username xxxxx privilege 15 password xxxxx
crypto ikev2 authorization policy default
route set interface
crypto ikev2 keyring FLEX_KEY
peer ALL
address 0.0.0.0 0.0.0.0
pre-shared-key local xxxxx
pre-shared-key remote xxxxx
crypto ikev2 profile FLEX_IKEv2
match identity remote address 0.0.0.0
authentication remote pre-share
authentication local pre-share
keyring local FLEX_KEY
aaa authorization group psk list default default
virtual-template 1
crypto ikev2 dpd 30 5 on-demand
ip tcp synwait-time 10
ip ssh time-out 60
ip ssh authentication-retries 2
crypto ipsec transform-set IKEv2 esp-gcm
mode transport
crypto ipsec profile default
set transform-set IKEv2
set ikev2-profile FLEX_IKEv2
interface Loopback101
ip address 172.31.101.3 255.255.255.255
interface Tunnel0
description FlexVPN tunnel
ip address negotiated
ip mtu 1400
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
ip nhrp redirect
ip tcp adjust-mss 1360
delay 1000
tunnel source Vlan1
tunnel destination x.x.x.x
tunnel path-mtu-discovery
tunnel protection ipsec profile default
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface FastEthernet4
ip address dhcp
no ip unreachables
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
interface Virtual-Template1 type tunnel
description FlexVPN spoke-to-spoke
ip unnumbered Loopback101
ip nhrp network-id 1
ip nhrp shortcut virtual-template 1
ip nhrp redirect
tunnel protection ipsec profile default
interface Vlan1
ip address 10.0.3.1 255.255.255.0
ip helper-address 10.0.1.15
no ip unreachables
ip nat inside
ip virtual-reassembly in
ip forward-protocol nd
no ip http server
no ip http secure-server
ip dns server
ip nat inside source list INTERNET_BOUND_ACL interface FastEthernet4 overload
ip route 0.0.0.0 0.0.0.0 dhcp
ip access-list standard INTERNET_BOUND_ACL
permit 10.0.3.0 0.0.0.255
ip access-list standard MGMT_ACL
permit 172.30.255.0 0.0.0.255
permit 172.31.100.0 0.0.0.255
permit 10.0.1.0 0.0.0.255
permit 10.0.3.0 0.0.0.255
permit 172.30.200.0 0.0.0.255
access-list 99 permit 10.0.3.0
control-plane
banner motd xxxxx
line con 0
no modem enable
line aux 0
line vty 0 4
access-class MGMT_ACL in
privilege level 15
transport input telnet ssh
ntp update-calendar
ntp server 0.pool.ntp.org prefer
ntp server 1.pool.ntp.org
end

How to set up TimeCapsule (4th) to create own private (wired) network behind Airport Express (5th) that is set up to join existing wifi-network of fritz adsl modem/router?

I work in an office building with free Wifi to connect to the Internet. I want to be able to use this internetconnection, but at the same time I want to shield of my own wired network.
I've made the following configuration:
- fritz adsl modem / router
- Airport Extreme (5th gen) set up to join existing wireless network (green light, works)
- Lan-cable from lan-port AE to wan-port TC (4th gen)
- Lan-cable from TC to Mac
- Lan-cable from TC to Printer
When I set my TC (network-settings) in bridge-mode everything works fine, but my Mac and Printer get an IP-address from the fritz modem / router and are visible to others.
I tried to set TC in NAT/DHCP-mode, but then I get the error message that I should set a static IP-adress for TC. When I set TC in DHCP-mode, it looses connection to the AE. I'm not sure what to do now. Does anyone know how to set up my TC and create my own private network and still be able to get on the internet?

Hajenius wrote:
Is there a better alternative? I'd rather not want to reset my TC every day.
You are using free internet.. so there is a price to pay.. that is convenience and non-ideal network setup.
The better alternative is to pay for your own connection. Then you are completely free of the possibility of others in the bullding seeing your connection. (as long as you secure the wireless).
But I think you are probably over worrying about public wifi.. if it is setup right.. ask the building admins.. it should be setup so each user cannot see another users connection. This is typical for most wifi setup and simply means you can see internet connection but nobody else on the connection. ie other wireless users.
Having a router with NAT makes it then more secure again and allows clients on your own network to interact with each other. But you can setup wireless to the free wifi for every client.. (depending on how many IP you are allowed).. and run a secondary network without internet access. This is easy for desktop etc where you have a wireless and a wired connection but less convenient for mobile devices.. unless you use a cloud connection and each client can link and share via that.
Have I made the explanation worse??
Think of it this way.. if you had 3 laptops.. all 3 could connect to the internet from the building wifi.. but they cannot talk to each other or share resources in local office. You can put resources out in the cloud, that can be shared.. but that adds traffic and most free services are not fast.
Now you can also plug all three into Time Capsule by ethernet.. and share local resources. Files, printers backup etc. This network is not connected to the internet at all. Each laptop has internet via free wifi and local connection.
For devices like iphones that have no ethernet or other method.. you could use local wireless and public wireless.. but in turns.. still the only advantage is less issues with double NAT.. if that causes problems.. then this is an alternative.

Switching back to ADSL from infinity

I live a long way from my green cabinet (1.5Km) , and have been disappointed with the upgrade from ADSL to Infinity ( or actually Unlimited Faster Broadband )
I used to get 2.1M downlad speeds on ADSL, and this has risen only to 2.5M on Infinity/UFB. Both speeds are well short of the worst case estimate provided on BTWholesale checker for my telephone number.
An Openreach engineer was called and repaired 3 seperate faults on the (aluminium) cable from the cabinet to my house. The engineer was happy that the line quality improved ( red lights on his box of tricks were now green), but sadly the speed did not increase - after 10 days it is stable at 2.5M.
My question is this - Although the improved line quality did not increase the speed of infinity connection, would it increase the ADSL speed from its original 2.1M if I switched back Is there a reliable way of finding out, because If I switch back and it is still pants , BT are no longer accepting orders for infinity here, and I would have lost the admittedly small increase that infinity brought me.
thanks

Apologies for formatting, but you get the idea
High Low   High   Low
FTTC Range A (Clean)   16.4   10   1.3   0.8- -Available
FTTC Range B (Impacted) 13.4 5.3   1.2   0.5- -Available
WBC ADSL 2+ Up to 2.5- -1.5 to 3.5 Available
WBC ADSL 2+ Annex M Up to 2.5 Up to 0.5   1.5 to 3.5   Available
ADSL Max   Up to 1.5-- 1 to 2.5   Available
WBC Fixed Rate   0.5   ---- Available
Fixed Rate 0.5 ----   Available
thanks for your help - intuitively I agree that the ADSL is not going to be worse than it was, but the extraa 0.5 M ( 25% !!!) makes a significant difference, and I would kick myself if I lost it
Do you have that same graph for ADSL conections ?

New Infinity installation is slower than ADSL - Su...

BT just rolled out Superfast broadband in my area so I signed up with BT. I was promised 13Mbps/1Mbs which was disappointing as it's nowehhere near the 'Superfast' speeds that BT advertise. I already have an ADSL line from TalkTalk which tests out at about 6.5Mbs/0.8Mbps so even though I will be paying 50% more at least I was promised that I would get double the speed. If only that were true!
A brand new line was run to the house on 20/5/2015 & the BT Homehib installed. However the speed is only 5Mbps/1Mbps & has not changed since installation. I immediately called customer support on the day of installation but they say there is nothing wrong with my line but clearly there is as I am not getting anywhere near a 'Superfast' speed not even the same speed as my exisiting ADSL line.
What do I need to do to escalate this & get the problem sorted? Clearly I don't intend paying 50% more to get an inferior 'Superfast' line from BT.

Here' some more tests as requested:--
FAQ
1. Best Effort Test: -provides background information.
Download Speed
5.07 Mbps
0 Mbps
5.2 Mbps
Max Achievable Speed
Download speedachieved during the test was - 5.07 Mbps
For your connection, the acceptable range of speedsis 3.64 Mbps-5.2 Mbps .
Additional Information:
IP Profile for your line is - 5.2 Mbps
2. Upstream Test: -provides background information.
Upload Speed
0.89 Mbps
0 Mbps
2 Mbps
Max Achievable Speed
Upload speed achieved during the test was - 0.89Mbps
Additional Information:
Upstream Rate IP profile on your line is - 2 Mbps
We were unable to identify any performance problem with your service at this time.
It is possible that any problem you are currently, or had previously experienced may have been caused by traffic congestion on the Internet or by the server you were accessing responding slowly.
If you continue to encounter a problem with a specific server, please contact the administrator of that server in the first instance.
Please visit the FAQ if you are unable to understand the test results.

How do I connect my Homehub3 to the NTA5 ADSL Wall...

Hi, all.
I have a Homehub 3 in a spare room, and want to move it to improve my wireless coverage, at home.
I have space in my hallway next to where the ADSL comes into the house, and this would seem like a neat solution. Currently I have an 'ADSL Data Extension Kit' running upstairs to the spare room, and then a small blue cable from this into the ADSL port on my hub.
The NTE5 2 port wall socket that I have (says Openreach ADSL v1.0 on the front), has a left port for ADSL and the right for telephone. I need to connect this to my Homehub, ideally with a really short cable, as the Hub will be located literally six inches from the wall socket. Does anyone know which cable I need, and where I can buy one (eBay/ Amazon?)? My limited research suggsts the ADSL port will accept an RJ45 or RJ11 cable.
Some thoughts:
1) I just have 'normal' speed broadband, so assume I can't run a cable from the wall socket to the 'BT Infinity' port on the router.
2) Typically the twin power socket that will feed the Hub, is almost level with the hall floor, and the BT power plug has the 3 pins at the top, not the bottom, so it is physically impossible to plug the power socket in. My initial thought is to get a short trailing socket, to get around this problem. Does anyone know of an alternative power adaptor that I could use with the Hub, which has a better thought out (or different) design?
Many thanks for your anticipated help.
Chris.
Solved!
Go to Solution.

chris_debian wrote:
Hi, all.
I have a Homehub 3 in a spare room, and want to move it to improve my wireless coverage, at home.
I have space in my hallway next to where the ADSL comes into the house, and this would seem like a neat solution. Currently I have an 'ADSL Data Extension Kit' running upstairs to the spare room, and then a small blue cable from this into the ADSL port on my hub.
The NTE5 2 port wall socket that I have (says Openreach ADSL v1.0 on the front), has a left port for ADSL and the right for telephone. I need to connect this to my Homehub, ideally with a really short cable, as the Hub will be located literally six inches from the wall socket. Does anyone know which cable I need, and where I can buy one (eBay/ Amazon?)? My limited research suggsts the ADSL port will accept an RJ45 or RJ11 cable.
Some thoughts:
1) I just have 'normal' speed broadband, so assume I can't run a cable from the wall socket to the 'BT Infinity' port on the router.
2) Typically the twin power socket that will feed the Hub, is almost level with the hall floor, and the BT power plug has the 3 pins at the top, not the bottom, so it is physically impossible to plug the power socket in. My initial thought is to get a short trailing socket, to get around this problem. Does anyone know of an alternative power adaptor that I could use with the Hub, which has a better thought out (or different) design?
Many thanks for your anticipated help.
Chris.
Hi there,
What you need is an RJ11 to RJ11 lead, but be careful of the cheap ones; invariably, even at the length you require, they're very poor quality.
If you go to that famous auction site and enter 261296967817 into the search bar, this will give you a good quality lead. Although the one I've indicated is 1m in length, if you email the seller, there's a fairly good possibility he can make you one in the length you require.
I hope this info helps.

Is a Happy Marriage Possible? New Airport Extreme & ADSL Modem/Router

Is a Happy Marriage Possible? New Airport Extreme & ADSL Modem/Router
1. I’m writing from a rural town in Southern Nepal, very close to India. I’m planning to create a new WI-FI network at a small monastery here. Ideally, we will have two parallel wireless networks: the first network produced by an ADSL router/modem and a second network produced by another router in “repeater” mode.
2. Earlier, someone suggested that, when I post a question, I should provide as many details as possible about the situation here. Forgive me if there is “too much information”. I have to make a trip to the US to buy new networking equipment, so I very much want to get this right. Once I return here, I’ll be pretty much stuck with whatever I get in the US.
3. The future routers will live next to each other in an office and could be linked by a cable (if this is the best route to go). We do not wish to “expand” the network (in the sense of making a larger WI-FI network), but rather wish to simply have two networks, hence one ADSL router/modem and one router with the “repeater” function (out-of-the-box without any jerry rigging). Both WI-FI signals need to travel approximately 100 (largely unobstructed) feet.
4. If my dreams come true, the second router would be an Apple Airport Extreme (AX). An Apple router would be ideal because my experience with Apple routers is happy: they are easy to set up, reliable, and secure. Moreover, we use Apple computers and iOS devices here (and the new AX has the “ac” thing which will be preferable as we replace old machines with new ones).
5. Yet, from reading posts and having my prior questions answered on this website, it may be that with an ADSL modem/router, all the ease and happiness of the Apple ecosystem is lost: while Apple routers seem to connect with each other easily, problems appear to arise when users try to inter-marry our non-Apple products with Apples.
6. Our current, super-crappy 2wire 2701hg-t (ADSL modem/router) covers the 100-foot distance without a problem when it is working and there is Ethernet flowing to us. Frequently, our connection is very bad, and I may be unfairly judging the 2wire 2701hg-t. But, based on user reviews on the America Amazon.com, the 2wire 2701hg-t is pretty terrible: first it is simply old and second, among other problems, it seems to have a poor quality power supply unit. I do observe that it frequently seems to be recycling from scratch as if it had turned off and restarted. In any case, we are replacing it since it may be about 4 or 5 years old.
7. In previous posts on this forum, “LaPastenague” responded to some of my earlier questions about AX and ADSL. Among other things, he pointed out that (1) line-attenuation may be contributing to our poor connection and (2) we must choose a modem/router that is suitable for “long lines.” I’ve looked at our current modem/router statistics page; however, there are no statistics for line-attenuation or noise. (As you will see below, my strategy is to get the “better” modem/router that is suitable for long lines.)
8. Concerning our ADSL service, these are the facts I’ve gleaned from looking at the current router’s configuration pages:
Connection Type: PPPoE
Currently, the router is configured to use WPA-PSK security.
Connection Speed: Incoming: 1024 kbps & Outgoing: 509 kbps
(The following information may be unimportant at this time.)
Broadband Link Diagnostics:
DSL Synchronization: UP
G.DMT Signal: UP
PVC Connection: UP
PPPoE Service: UP
PPP Authentication: UP
IP Connection: UP
DNS Communication: UP
9. The ISP (Nepal Telecom) doesn’t supply a modem/router; however, they do have a list of (at times ancient) hardware and hardware vendors:
http://www.ntc.net.np/internet/adsl/adsl_vendersConf.php
10. Concerning what equipment is available here, what I have observed is that generally the ADSL modem/routers for sale locally, and in the far-away capital Kathmandu, and in nearby India are often also available in the United States, but they are the cheaper, older models. I will have to buy the new equipment in the US this year. At a different institution nearby, they are using the TP-Link modem/router td-w89016 which they purchased locally, I believe.
11. Based in part on LaPastenague’s earlier advice, I want to buy the TP-LINK TD-W8980 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router (2.4GHz 300Mbps+5Ghz 300Mbps, IPv6 Compatible). This appears to be the most popular ADSL device on Amazon now.
Will this modem/router work EASILY with the Airport Extreme in the manner I’ve described? That is, connecting the two with a cable and creating two WI-FI networks.
12. Also, is it generally correct that the best way to connect them is with an Ethernet cable: https://discussions.apple.com/message/23759755#23759755
13. In fact, does connecting them with a cable help alleviate some of the problems that can occur between the Apple device and the ADSL modem/router?
14. If this will work, what “mode” will the AX device be in (again, in order to have two separate networks with separate passwords)? I have heard of the “repeater”, “roaming” , and “bridge” modes.
15. Are there two levels of passwords which need to be considered? Of course, there is the network and network passwords which we create here and which will be different. But, does the Apple also have to have the ISP password like the principle ADSL modem/router?
16. To set this up, what information do I need from the ISP (e.g., passwords, IPs…)?
I think there are a lot of good reasons to use an AX router. Of course, if it is just going to be very cumbersome then, we would be loosing one of the best parts of using Apple products. So, whoever feels knowledgeable enough to reply to this post, please be sincere if you think it is better to avoid the Apple. Apple can rest assured that I will buy other things from them!
In that case, I’d likely buy a second TP-Link device to create a second network:
TL-Wa801NP [AP Mode Multi-SSID Mode AP Client Mode Repeater Mode (WDS / Universal) AP+ Bridge mode (point-to-point / point to Multi-point)].
Thank you in advance. Long live Apple!
Message was edited by: Jess1911

I am not sure if there are different interfaces but my 2wire does an excellent job with line info.
I get into this from browser.. using main IP.. in my case 10.0.0.138/MDC
In your case it should be whatever the IP of the 2wire is, followed by /mdc
Give it a try.
As you can see it shows vendor and loads of info about the line.
I rate it the best domestic modem for line info.
A good modem actually albeit a lousy router.
MDC is the diagnostics and Management Console.
3. The future routers will live next to each other in an office and could be linked by a cable (if this is the best route to go). We do not wish to “expand” the network (in the sense of making a larger WI-FI network), but rather wish to simply have two networks, hence one ADSL router/modem and one router with the “repeater” function (out-of-the-box without any jerry rigging). Both WI-FI signals need to travel approximately 100 (largely unobstructed) feet.
You are not repeating.. you are simply setting up two routers which are interconnected, so one is dependent on the other.. ie one is your adsl modem router and that will take the main router function. Your second router is really not working as a router, but as wireless access point (and switch if you plug things in).
That is perfectly fine. You are not roaming in this case since both routers are running different wireless names and networks.. but they are actually using same IP range.. all devices are on the one IP network with two different wireless access points.
4. If my dreams come true, the second router would be an Apple Airport Extreme (AX).
Apple router is fine for this. Easy to configure out of the box.
5. Yet, from reading posts and having my prior questions answered on this website, it may be that with an ADSL modem/router, all the ease and happiness of the Apple ecosystem is lost: while Apple routers seem to connect with each other easily, problems appear to arise when users try to inter-marry our non-Apple products with Apples.
The problem arises when you try and interconnect using wireless extend or repeater.. you are not using wireless to extend, you are using ethernet. Wired has no issues.
11. Based in part on LaPastenague’s earlier advice, I want to buy the TP-LINK TD-W8980 N600 Wireless Dual Band Gigabit ADSL2+ Modem Router (2.4GHz 300Mbps+5Ghz 300Mbps, IPv6 Compatible). This appears to be the most popular ADSL device on Amazon now.
Will this modem/router work EASILY with the Airport Extreme in the manner I’ve described? That is, connecting the two with a cable and creating two WI-FI networks.
It is a good choice.. It should be fine considering how poor your line is.. this modem is proving to have a couple of bugs.. it does not handle torrents well but I would suggest your system is not being used for that purpose. It has some port forwarding issues. Again you are probably not going to overload it.
12. Also, is it generally correct that the best way to connect them is with an Ethernet cable: https://discussions.apple.com/message/23759755#23759755
Absolutely best.. only decent method.
14. If this will work, what “mode” will the AX device be in (again, in order to have two separate networks with separate passwords)? I have heard of the “repeater”, “roaming” , and “bridge” modes.
Bridge. Although if it gives issues there is another method, although rather complex to setup.. not something to worry about now.
15. Are there two levels of passwords which need to be considered? Of course, there is the network and network passwords which we create here and which will be different. But, does the Apple also have to have the ISP password like the principle ADSL modem/router?
Only the adsl modem has the ISP authentication.. it is the box that does the link. The TC just piggy backs.
The passwords on the TC are for its Admin, wireless and disk access.
16. To set this up, what information do I need from the ISP (e.g., passwords, IPs…)?
For ADSL you must have the PPPoE authentication username and password.
So, whoever feels knowledgeable enough to reply to this post, please be sincere if you think it is better to avoid the Apple.
hmmm.. I am biased because I see the issues not all the good stories..
The latest airport and Time Capsule seem to have a few pretty severe bugs.. if they happen to hit you, they are extremely hard to fix if you are in the middle of Nepal. And Apple service centre is a long long way away.
I cannot answer your question from the point of view of a person on the ground in remote area. If the economics of the purchase works for you, great. Go for it.
In terms of wireless coverage.. the Asus AC models or Netgear R7000 kill the Apple. Sorry but it is just fact.
See reviews here.
http://www.smallnetbuilder.com/lanwan/router-charts/bar/113-5-ghz-dn-c
That is average.. if you look at the apple router in the worst location by changing the filters, it comes out worse again.
I cannot post the URL to our local forum here.. (apple doesn't allow it). But in testing with apple clients the asus still beat Apple router soundly.
Pure wireless range is not the only consideration.. but in a mixed environment and since the wireless on the 8980N is not too bad.. then buy Apple router for apple client devices makes good sense.
Maybe the older Gen5.. or two of them.. would do a better job.. with a bit more tested and known hardware.
One thing you do need to check.
Routers from every other brand allow you to select country. Any country from anywhere in the world. Apple routers do not.
If you buy an airport in North America it is coded to North America and offers just a few countries.. USA, Canada I suppose.. what else is North America??
You cannot change it to Nepal.
To get the one for Nepal you must buy the model that covers, South Asia I guess.. I am not sure which it is.
See what the license information is for wifi in Nepal as it might be very different to US and therefore illegal for you to run it in Nepal.
If only the whole world would just bow to America.. we could all follow the FCC regs..
http://en.wikipedia.org/wiki/List_of_WLAN_channels
This only applies to the Apple.. the TP-Link etc allows you to choose Nepal or correct country regulations for wifi.
Buying modems has one tricky bit.. that the actual adsl ATM channel is different in different parts of the world. No modem is usually impossible to setup but some can be difficult if it is pre-configured for US.. this is easy to overcome generally as you can download a firmware for another locality, so you can have local settings.

How can I connect my G5 iMac to Telefonica ADSL?

I just moved to Spain. The ADSL connection offered by telefonica seems to be set up with just PCs in mind. I do not know how I can connect my iMAc and my extreme Airport Base Station to that ADSL system. Do I need any special configuration in the Base Station? The ADSL comes with an inalambric Router.
Many thanks for any help.

Hola,
Just to say I spend a fair bit of time in my house on Costa Brava. I take my Apple PB and wife's Acer Laptop each time we go out.
I have DSL from Telefonica and it is the WiFi version modem all in one job.
I did not set up with a AEBS or a Netgear job because we rent out for the hottest part of the year and I know they would get damaged, hence the Telefonica modem.
What I suggest you do is got to Telefonicas website where you will find the English option. There you will find the company that provides manuals for their modems in english. Telefonica does have and should have sent you details of your password etc when you got connected. If they povided the modem it would have been set up prior to delivery to you. What I suggest is that you connect your AEBS to the modem and use it that way.
Go here:
http://www.telefonicainenglish.com/
http://www.telefonicaonline.com/on/pub/servicios/onTOEntrada/1,,vsegmentoEMPR+v_idioma+es+ambitoAcceso+pub+entradaurladsl,00.html?servicio=entrada&entrada=urladsl&urlcentral=/on/es/micro/adsl/ayudainst/index.htm
I am going to take a new Belkin which is surplus to my requirements down and set it up because it is all in English, mainly for the WiFi side of things. Once set up I will copy back to Xavi 7768 and see how it goes.
What model of Inalámbrico do you have?
Oh, I the forgot to say that when I first connected to modem via ethernet both laptops worked perfectly. Also one thing I place at the top of my list is that as the weather is so much better out there I spend as little time as I can on the computer. So we leave them on and connected by cable and only check when a mail arrives, that is of course if we are in earshot and not in the pool or relaxing elsewhere.
Cheers

How do I set up Time Capsule on a Telstra (Australian ISP) ADSL account?

I'm trying to set up a TC with my Telstra ADSL account. I know that I need to put the modem into bridge mode, but I don't what the other settings should be either on the TC or on the modem (far too many acronyms - PPPoE, DHCP, ?!?) Anyone got any experience with this? My ISP was no help whatsoever.

Telstra will just hand you off to paid support. And at $99 it is no cheap trick either.
What modem do you have?
Whilst you have internet via the Thomson.. download and install the 5.6 airport utiity.
http://support.apple.com/kb/DL1482
Install and use that instead of the v6 in Lion.
Any of the speedtouch / Thomson / Technicolor.. go to the setup page in your browser.. ie 10.0.0.138 and in the configuration section go to setup wizard.
Then out of the list of templates, choose bridge. Finish the wizard without making any other changes.
The modem will reboot.. and you will have no internet.. this is correct.
Now plug the TC into the Thomson.. Lan to Wan on the TC.. ie the port next to the power and usb.
Plug a computer into the TC by ethernet.. much easier to do it via ethernet.
Now open the 5.6 utility.. go to manual setup, go to internet tab.
Now for connection.. it will by default say ethernet.. change that to pppoe.
It will open new area for you to type in your bigpond username and password.. do that.
Then update the TC and keep your fingers crossed.. it should work.
Post back if you have issues.
It could be easier to simply bridge the TC.. but try and get it working as router first.

I can't connect to Internet anymore (WIFI or Ethernet). This was working perfectly before. I don't get a proper IP address from my ADSL box and it seems there is a DNS error when accessing the Internet.

I have an issue with my MacBook pro (MAC OS X 10.8.3) when trying to access Internet. I am behind an ADSL box (Orange). I have a PC on the same LAN which accesses Internet perfectly via the same Box.
On the MAC, I have tried WIFI and Ethernet. And have same issue on both. I have checked the IP address (the ADSL box is a DHCP server) but the MAC doesn't get a proper IP and network mask I tried a manual IP address setup and it doesn't get better. I have setup the DNS servers for my Internet provider, but I get DNS error. I have tried 2 Internet browsers (Chrome and Safari), both have the same issue.
I tried to put my MAC on a different ADSL box (I have 2 acccesses with 2 providers at home) and get the same issue.
I also noticed a havy CPU load on the mDNSResponder process (at least 30%). I have restarted it, but no improvement.
Last, I have repared the permissions.
From those trials, it seems that the problem is on the Mac side. But I am completelly without any new idea, so I need help
Thanks

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, or by a peripheral device.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

At the end of my tether with ADSL broadband! Advic...

I have been experiencing problems with my ADSL broadband for a year. I am less than 1km from my BT exchange. I currently use an independent ISP (Zen) and my own modem (Billion BiPAC 7800N).
Symptom 1: Intermittent audible noise on voice line which is accompanied by ADSL modem randomly losing sync. The noise on the voice line sounds like crackling or someone rustling cellophane, or sometimes squeaking. If I turn off the modem or unplug it from the microfilter, the noise on the voice line generally gets quieter or stops.
Symptom 2. Intermittent modem sync loss a few seconds after picking up or putting down phone receiver.
I have tried everything I can think of: brand new modem, turning router off/on, new microfilters (x3), plugging permanently into test socket, ditched Siemens cordless phone and using BT branded corded, changed ISP, disconnecting all other household appliances when the probelm occurs. I have only the master socket, no extensions.
BT have sent engineers on 3 occasions, but the problem never occurs when they are here. They have replaced the master socket, and wiring inside my house terminating in a new black sausage connector at my fascia board. They have fiddled around on the telephone pole across the street, and in the green cabinet down the road. They have put meters on the line. But they say the line is absolutely fine. They are quite happy to close the ticket every time, even though I have not agreed the problem is resolved. Sometimes the problem recurs within hours of the engineer leaving. Yet sometimes the problem goes away for days or weeks, but has always returned.
Can anyone give any advice on getting this resolved? It is driving me, almost quite literally, insane.
I am just about to throw in the towel, cancel the BT line rental and the ISP contract, and try switching to cable, which I feel now I should have done a long time ago. BT just do not seem willing to put the effort in to get to the bottom of this problem. It would seem like common sense to agree to send an engineer out on a day when the problem is occuring, but this seems completely out of the question to such a sophisticated company.
Thanks
Rob

imjolly wrote:
you can't seriously expect and engineer on standby to drive to your home immediately you phone
I am not for one moment suggesting I have a personal engineer on standby as you seem to be implying.
BT is a very large company with very many customers, and a measurable number of these have intermittent problems. Apart from myself, I have personally met quite a few in this category, and there seem to be a fair number voicing their problems on this forum.
It does not seem unreasonable to me for BT to adopt a different business process to such problems than currently. A proportion of the engineers could be in teams that respond specifically to intermitent faults and customers with such faults could expect, after a number of failed visits, to get hold of one on the day the problems are occurring. The current approach, whereby an engineer turns up many days after a customer has gone through a day of hell, with inaudible voice line and non-existent broadband, only to shrug, say no fault found, and close the ticket, is quite lamentable. It is deeply frustrating and insulting to customers in equal measure. Still, I suppose it keeps the senior management happy by minimizing outstanding fault numbers, so keeping performance bonuses intact, etc. However, it does nothing for elevating the status of BT in the eyes of customers.

Connecting a WRT54G2 V1 to a ADSL Ovislink Modem router combo

I am trying to set up my linksy router to a ADSL Ovislink Modem router combo and when I install the CD on the main computer I keep getting this error message
"Error 322- New router or gateway not detected"
I have hooked everything up correctly as the CD has instructed me. My TV, phone and internet all are on the same package. I have powered down both th ADSL and my linksys and still not detecting the linksys. The 1 computer light on the linksys blinks evry now and than and so does the ((( light will blink sometimes too.
I had my cable modem hooked up to it in August and it worked fine and than we moved and the place we moved to has ADSL modem router and I need to hook up my router to get internet as the ADSL only allows one computer to be hooked up through the ADSL one. So I know there is nothing wrong with my router.
Any suggestions would be helpful.

If you are trying to setup your router using the setup disk you can exit from the setup and configure all the settings on your router manually.
If your Internet Service Provider is DSL follow this link

Are my ADSL stats normal?

Hi there,
Just looking for some insight on the ADSL stats on my line. Recently connected, still in DLM period but have noticed noise, output and attentuation settings have not changed +/- 0.5 dB at any point since connection.
Broadband performance feels variable, have had to reboot my router a couple of times due to browser sessions hanging etc and the broadband service appearing to have stopped working. A reboot tends to sort it.
Here's my stats - can anyone give an insight? I'm slightly worried about the number of errors..
ADSL Line Status
Connection Information
Line state:
Connected
Connection time:
0 days, 22:24:35
Downstream:
16.02 Mbps
Upstream:
1.094 Mbps
ADSL Settings
VPI/VCI:
0/38
Type:
PPPoA
Modulation:
G.992.5 Annex A
Latency type:
Fast
Noise margin (Down/Up):
6.2 dB / 5.9 dB
Line attenuation (Down/Up):
25.7 dB / 14.5 dB
Output power (Down/Up):
20.3 dBm / 12.8 dBm
FEC Events (Down/Up):
0 / 0
CRC Events (Down/Up):
140260 / 4966
Loss of Framing (Local/Remote):
0 / 0
Loss of Signal (Local/Remote):
0 / 0
Loss of Power (Local/Remote):
0 / 0
HEC Events (Down/Up):
177670 / 812
Error Seconds (Local/Remote):
17201 / 942
Solved!
Go to Solution.

yes i would leave your connection to complete the training period during which time your latency may change to interleaved automatically but it is important to try and not manually restart the hub
If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the reply answers your question then please mark as ’Mark as Accepted Solution’

Flexvpn fvrf 3G or adsl

Similar Messages

Maybe you are looking for